Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
31-08-2024 08:05
Static task
static1
1 signatures
General
-
Target
a58f9b92095000612160b11c5a9be8898e9d35e9f3d0df78d9f0cfdb7479edd0.exe
-
Size
432KB
-
MD5
f7b827dce8dd3c6fd15a63a15a370206
-
SHA1
b6076f4bb1b0cece556fe3cbfa3489922f2a44b5
-
SHA256
a58f9b92095000612160b11c5a9be8898e9d35e9f3d0df78d9f0cfdb7479edd0
-
SHA512
36699916c62f063b20c2c1de4bda482c4beec074a35949280b2a43456998fc5d31535a051e71b6e3e325440194930b2c0863fdd950a8e57c934757eba168453d
-
SSDEEP
6144:HFUCmZqoFWC6xeHj8Y88weIExx0LbITWp2g9pDBFjGNPDBvTSrCIiMy1BsgBJ:lUCmZiC5jjIxmx0L311B9mPDB7IiNvp
Malware Config
Signatures
-
Expiro payload 3 IoCs
Processes:
resource yara_rule behavioral1/memory/3656-0-0x0000000000470000-0x0000000000504000-memory.dmp family_expiro1 behavioral1/memory/3656-2-0x0000000000400000-0x0000000000504000-memory.dmp family_expiro1 behavioral1/memory/3656-1-0x0000000000470000-0x0000000000504000-memory.dmp family_expiro1